Vulnerabilities > CVE-2007-2749 - SQL Injection vulnerability in FAQEngine Question.PHP

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
faqengine
exploit available
NVD
Published: 2007-05-17
Updated: 2017-10-11

Summary

SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrary SQL commands via the questionref parameter in a display action.

Vulnerable Configurations

Part Description Count
Application
Faqengine
1

Exploit-Db

descriptionFAQEngine <= 4.16.03 (question.php questionref) SQL Injection Exploit. CVE-2007-2749. Webapps exploit for php platform
fileexploits/php/webapps/3943.pl
idEDB-ID:3943
last seen2016-01-31
modified2007-05-16
platformphp
port
published2007-05-16
reporterSilentz
sourcehttps://www.exploit-db.com/download/3943/
titleFAQEngine <= 4.16.03 question.php questionref SQL Injection Exploit
typewebapps

References